GeneralInformation

Hostnames	fyf.finance app.fyf.finance www.app.fyf.finance www.fyf.finance li1953-48.members.linode.com worldofmatt.xyz www.worldofmatt.xyz
Domains	fyf.finance linode.com worldofmatt.xyz
Cloud Provider	Linode
Cloud Region	ca-on
Country	Canada
City	Toronto
Organization	Linode
ISP	Akamai Connected Cloud
ASN	AS63949
Operating System	Debian

WebTechnologies

CDN

Cloudflare

cdnjs

JavaScript libraries

jQuery3.3.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 3306 33060

22 / tcp

636002211 | 2025-02-02T21:10:41.947614

SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDPpcl0y1SODzdReL/DKgx6XrBkBOCl+HoKkawILN2z/0MR
9kwF4jPZjUPdz7EujmiZ+Z3QmbdpFh5CO+GgDGVSkaW/ZWcu2eRrPf2stgOpzvZLpqXLySMfWvW0
ieeBdiDW8e3k9sxfgDaHWz2lTDkZ1WqFhKH8ANb50DQ3mINeLB+gEWeHXC9rsOmkDyppHMNid5sP
QQJyMkbzugcol79G4jukAVZDfoJ2ZSXtVVHRE0vf0YzIEnRzeSbbP9W9dF2vSfglZzIAsuQKEEBX
5WCEQ/2GDwRhMmKvVvTQC9QaHS/0LhVciCYmJzRV+NmnpQdM7snp+Ao3SNaYeJ4WLWmP
Fingerprint: 66:3d:29:21:80:1a:3d:74:36:d5:d0:e5:c3:26:75:36

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

80 / tcp

1017959235 | 2025-01-20T00:53:12.825726

Hashes

hash

464728147

http.dom_hash

471906108

http.html_hash

1017959235

http.server_hash

324296001

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Jan 2025 00:53:12 GMT
Server: Apache/2.4.38 (Debian)
Location: https://app.fyf.finance/SignIn.php
Content-Length: 323
Connection: close
Content-Type: text/html; charset=iso-8859-1

CVE-2024-38476 CVE-2024-38474 CVE-2023-25690 CVE-2022-36760 CVE-2022-31813 CVE-2022-28615 CVE-2022-23943 CVE-2022-22721 CVE-2022-22720 CVE-2021-44790 CVE-2021-40438 CVE-2021-39275 CVE-2021-26691 CVE-2020-11984 CVE-2019-10082 53 moreCVE-2024-40898 CVE-2024-38477 CVE-2024-27316 CVE-2023-31122 CVE-2023-27522 CVE-2022-30556 CVE-2022-29404 CVE-2022-26377 CVE-2022-22719 CVE-2021-44224 CVE-2021-36160 CVE-2021-34798 CVE-2021-33193 CVE-2021-26690 CVE-2020-35452 CVE-2020-11993 CVE-2020-9490 CVE-2019-10097 CVE-2019-10081 CVE-2019-9517 CVE-2019-0217 CVE-2019-0215 CVE-2019-0211 CVE-2013-4365 CVE-2011-2688 CVE-2007-4723 CVE-2006-20001 CVE-2023-45802 CVE-2022-37436 CVE-2022-28614 CVE-2022-28330 CVE-2021-32791 CVE-2021-32786 CVE-2021-32785 CVE-2020-13938 CVE-2020-1934 CVE-2020-1927 CVE-2019-17567 CVE-2019-10098 CVE-2019-10092 CVE-2019-0220 CVE-2019-0197 CVE-2019-0196 CVE-2013-2765 CVE-2013-0942 CVE-2012-4360 CVE-2012-4001 CVE-2012-3526 CVE-2011-1176 CVE-2009-2299 CVE-2021-32792 CVE-2013-0941 CVE-2009-0796

443 / tcp

-1333261613 | 2025-01-20T00:53:15.691991

Hashes

hash

-1305231038

http.dom_hash

-317522513

http.html_hash

-1333261613

http.server_hash

324296001

http.title_hash

2106765041

Form

HTTP/1.1 302 Found
Date: Mon, 20 Jan 2025 00:53:15 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: PHPSESSID=23hkqhdl89cl36lsv9bodsg1gr; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: http://app.fyf.finance/SignIn.php
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:6d:6e:51:91:69:06:c3:14:9d:3d:4d:80:99:de:ab:ba
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Jan 11 20:38:17 2025 GMT
            Not After : Apr 11 20:38:16 2025 GMT
        Subject: CN=fyf.finance
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:66:77:6d:ab:45:d0:27:74:bb:6f:3b:48:
                    bb:cb:9d:1c:fb:0d:5f:ff:76:e2:e8:b1:a2:2d:fe:
                    f5:f1:fd:48:69:bd:8f:5b:bd:ae:09:ea:b9:fd:96:
                    25:d3:0f:79:f2:71:20:90:e9:03:d5:67:fb:60:14:
                    b4:8a:b0:26:c8:43:08:ba:b6:47:f7:c0:5f:61:fb:
                    98:3e:05:a1:2d:f1:15:fd:f7:14:d7:8e:a2:23:97:
                    70:00:c8:1d:e4:25:56:07:d2:83:85:d5:31:5a:d0:
                    14:ea:72:ef:eb:5b:c7:e4:73:d4:90:b0:d3:dd:87:
                    4a:b9:c3:b8:1e:0c:be:c8:16:65:0e:48:3f:43:5f:
                    42:cf:6e:b1:05:7d:e7:8b:e8:53:17:1e:4a:df:43:
                    45:42:e1:03:0b:f6:be:cc:dd:98:d9:cb:82:af:b7:
                    ad:03:7e:79:f1:32:2d:1d:0b:46:97:fd:69:50:2e:
                    7c:2e:6a:0a:68:ed:7a:ef:bb:a5:11:ae:37:b2:21:
                    4d:1d:70:66:cb:fa:36:fb:4c:b2:e9:13:58:31:35:
                    c5:3c:d6:0a:f2:37:88:11:27:59:90:6e:89:1c:2d:
                    94:40:b9:fe:20:b2:0c:77:f9:6c:2e:86:50:ff:33:
                    04:09:d2:61:38:9e:3d:2b:3a:ab:5c:c3:ba:a2:67:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CE:7A:C1:4B:27:78:DA:D4:E2:3B:50:E8:11:AC:79:B6:95:11:A6:22
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:app.fyf.finance, DNS:fyf.finance, DNS:worldofmatt.xyz, DNS:www.app.fyf.finance, DNS:www.fyf.finance, DNS:www.worldofmatt.xyz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan 11 21:36:47.659 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F0:25:17:D0:E2:58:20:1C:0B:09:32:
                                34:12:04:E9:1E:F9:D0:0E:A5:39:D6:3B:7D:93:4A:C6:
                                40:A6:C6:24:33:02:20:43:3B:4E:F5:10:63:AA:26:1F:
                                51:3E:48:81:01:3B:B0:EF:13:E7:4C:20:9D:0B:29:0F:
                                BB:F8:BF:36:0F:13:5B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Jan 11 21:36:47.857 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BD:D0:D3:8D:8A:C4:35:F3:67:EB:CA:
                                E0:74:15:43:C4:34:99:AE:65:FD:30:64:AE:95:62:43:
                                02:EF:12:7B:C8:02:21:00:E5:3A:13:82:8A:1A:9A:97:
                                5E:15:C6:66:6B:E5:3A:D5:31:ED:FA:C3:65:BA:8C:E0:
                                5E:D0:1D:7D:20:1A:E4:08
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:b8:62:fc:0a:48:90:6d:84:da:0b:31:31:42:dc:00:05:15:
        7d:f2:1e:c0:7e:37:ff:12:bf:50:97:d9:52:35:84:1a:5a:83:
        60:c6:ce:63:68:4c:e5:c8:72:cc:fa:31:e4:ec:8d:78:f0:59:
        51:f6:04:85:0c:be:1d:21:33:b1:fe:70:7e:66:8e:e0:32:98:
        31:22:b8:23:a9:7f:26:37:4f:27:97:51:10:71:64:37:8b:ff:
        ac:66:65:89:93:b0:c9:f2:66:62:ce:95:f4:6e:ee:01:52:6f:
        a8:41:ea:01:f9:59:4c:a3:59:b6:a1:b3:7b:e0:c6:d9:23:55:
        d2:35:c6:a3:ab:d6:8a:ff:31:a4:1b:75:bc:dc:e7:a2:90:8a:
        85:12:0f:5c:97:04:ba:75:01:ce:14:81:b3:4a:a4:33:15:84:
        94:11:ed:78:8a:eb:88:40:ce:6b:0c:e5:84:97:be:71:25:8b:
        8a:ae:a4:c3:3c:05:09:f0:43:aa:04:8c:d2:5e:b2:81:67:08:
        13:0f:e4:9b:41:23:50:9c:de:8f:11:a6:f1:14:a9:73:25:30:
        9f:d8:23:a4:e6:95:aa:21:54:f6:2b:90:62:a3:b6:bb:cd:ed:
        06:43:cd:f2:c9:cd:61:ab:12:69:f9:e9:0f:67:32:69:02:6c:
        8f:d5:9d:cd

CVE-2024-38476 CVE-2024-38474 CVE-2023-25690 CVE-2022-36760 CVE-2022-31813 CVE-2022-28615 CVE-2022-23943 CVE-2022-22721 CVE-2022-22720 CVE-2021-44790 CVE-2021-40438 CVE-2021-39275 CVE-2021-26691 CVE-2020-11984 CVE-2019-10082 56 moreCVE-2024-40898 CVE-2024-38477 CVE-2024-27316 CVE-2023-31122 CVE-2023-27522 CVE-2022-30556 CVE-2022-29404 CVE-2022-26377 CVE-2022-22719 CVE-2021-44224 CVE-2021-36160 CVE-2021-34798 CVE-2021-33193 CVE-2021-26690 CVE-2020-35452 CVE-2020-11993 CVE-2020-9490 CVE-2019-10097 CVE-2019-10081 CVE-2019-9517 CVE-2019-0217 CVE-2019-0215 CVE-2019-0211 CVE-2013-4365 CVE-2011-2688 CVE-2007-4723 CVE-2006-20001 CVE-2023-45802 CVE-2022-37436 CVE-2022-28614 CVE-2022-28330 CVE-2021-32791 CVE-2021-32786 CVE-2021-32785 CVE-2020-13938 CVE-2020-11023 CVE-2020-11022 CVE-2020-1934 CVE-2020-1927 CVE-2019-17567 CVE-2019-11358 CVE-2019-10098 CVE-2019-10092 CVE-2019-0220 CVE-2019-0197 CVE-2019-0196 CVE-2013-2765 CVE-2013-0942 CVE-2012-4360 CVE-2012-4001 CVE-2012-3526 CVE-2011-1176 CVE-2009-2299 CVE-2021-32792 CVE-2013-0941 CVE-2009-0796

3306 / tcp

-431352069 | 2025-01-29T00:49:10.391952

MySQL:
  Error Message: Host '224.51.188.85' is not allowed to connect to this MySQL server
  Error Code: 1130

33060 / tcp

-795948505 | 2025-01-27T01:11:52.218963

MySQL X Protocol:
  tls: False
  authentication.mechanisms:
    MYSQL41
    SHA256_MEMORY
  doc.formats: text
  client.interactive: False
  compression:
    algorithm:
      deflate_stream
      lz4_message
      zstd_stream
  node_type: mysql
  client.pwd_expire_ok: False

172.105.0.48

Last Seen: 2025-02-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

636002211 | 2025-02-02T21:10:41.947614

OpenSSH7.9p1 Debian 10+deb10u2

80 / tcp

1017959235 | 2025-01-20T00:53:12.825726

Hashes

Apache httpd2.4.38

443 / tcp

-1333261613 | 2025-01-20T00:53:15.691991

Hashes

Apache httpd2.4.38

3306 / tcp

-431352069 | 2025-01-29T00:49:10.391952

MySQL

33060 / tcp

-795948505 | 2025-01-27T01:11:52.218963

MySQL X Protocol

Products

Pricing

Contact Us

172.105.0.48

Last Seen: 2025-02-02

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

22 / tcp 636002211 | 2025-02-02T21:10:41.947614

OpenSSH7.9p1 Debian 10+deb10u2

80 / tcp 1017959235 | 2025-01-20T00:53:12.825726

Hashes

Apache httpd2.4.38

443 / tcp -1333261613 | 2025-01-20T00:53:15.691991

Hashes

Apache httpd2.4.38

3306 / tcp -431352069 | 2025-01-29T00:49:10.391952

MySQL

33060 / tcp -795948505 | 2025-01-27T01:11:52.218963

MySQL X Protocol

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

636002211 | 2025-02-02T21:10:41.947614

80 / tcp

1017959235 | 2025-01-20T00:53:12.825726

443 / tcp

-1333261613 | 2025-01-20T00:53:15.691991

3306 / tcp

-431352069 | 2025-01-29T00:49:10.391952

33060 / tcp

-795948505 | 2025-01-27T01:11:52.218963